Static task
static1
Behavioral task
behavioral1
Sample
65bd0af0bee60e1dd3f045e67296b321_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65bd0af0bee60e1dd3f045e67296b321_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65bd0af0bee60e1dd3f045e67296b321_JaffaCakes118
-
Size
884KB
-
MD5
65bd0af0bee60e1dd3f045e67296b321
-
SHA1
0345125a217c4d43d9fbc9dfa097422443a1e47c
-
SHA256
0147314c9e5e0fba452613b11f069950027d3b409e2284e981ced7f32e24d6e0
-
SHA512
298c80bec08306d4ad1d08e11c1c42d2d8e52279da193c915bd683b41d91502414866accb7a2b8c9a9dd55483a87c6cd5ff49e273133743b70ac57cbdf68837e
-
SSDEEP
24576:gGwq5obASTvDYUWCVlZiab3oDkYjgj9cSdt9staBzGzADxRcGDfzmbtS:TGbmJzqxRcGDCb4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65bd0af0bee60e1dd3f045e67296b321_JaffaCakes118
Files
-
65bd0af0bee60e1dd3f045e67296b321_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 170KB
IMAGE_SCN_MEM_READ
VProtect Size: 628KB - Virtual size: 628KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 244KB - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ